CVE-2024-47518

Specially constructed queries targeting ETM could discover active remote access sessions...

PT-2025-2769

Name of the Vulnerable Software and Affected Versions: ETM affected versions not specified Description: Specially constructed queries targeting ETM could discover active remote access sessions. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2025-3711

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue involves specially constructed queries that cause cross-platform scripting, resulting in the leakage of administrator tokens. This allows for potential unauthorized access and...

The vulnerability of the IBM DB2 database management system (including the IBM DB2 Connect server) is related to the unlimited distribution of resources, which allows a hacker to cause service failures.

The vulnerability of the IBM DB2 database management system including the IBM DB2 Connect server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted query...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-01783)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause a...

The vulnerability of the IBM DB2 database management system (including the IBM DB2 Connect server) is related to uncontrolled memory allocation, which allows a attacker to cause a service failure.

The vulnerability of the IBM DB2 database management system, including IBM DB2 Connect and the IBM DB2 Connect server, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted query...

PT-2024-29556 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is a denial of service, where the server may crash under certain conditions with a specially crafted query. Recommendations:...

Symfony Environment Change Vulnerability (GHSA-x8vp-gf4q-mw5j)

Symfony is prone to a vulnerability where it is possible to change the environment in a query. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the MongoDB database management system lies in improper handling of zero bytes during BSON data processing. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the MongoDB database management system server is related to improper elimination of zero bytes. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted queries...

PT-2024-31720 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1 through 12.1 Description: The issue is related to a denial of service condition where the server may crash under certain conditions when processing a specially...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) allows a attacker to access the internal database.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to the internal database by sending...

DEBIAN-CVE-2024-50340

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

CVE-2024-29723

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to retrieve, update and delete all information in the database by sending a specially crafted SQL query: https://XXXXXXX.saludydesafio.com/conexiones/ax/openTracExt/, parameter...

Important: bind

Issue Overview: The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This...

Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.

Summary There are multiple vulnerabilities in IBM® Db2® 11.5 used by IBM® Db2® Big SQL 7 on IBM Cloud Pak for Data 4.7 and earlier. These issues were disclosed in an IBM® Db2® Security Bulletin in July 2023. Vulnerability Details CVEID:CVE-2023-30447 DESCRIPTION: IBM Db2 for Linux, UNIX and Windo...

Security Bulletin: Multiple Vulnerabilities in Db2 affect IBM Cloud Pak System.

Summary Multiple Vulnerabilities in Db2 affect Cloud Pak System. Vulnerability Details CVEID:CVE-2023-30447 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM...

Regular Expression Denial Of Service (ReDoS)

Wagtail is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression handling in the parsequerystring process for long query strings without spaces, allowing attackers to submit crafted queries that consume excessive server resources and...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in resource management errors, which allow attackers to cause service failures.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by executing specially crafted SQL queries remotely...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in resource management errors, which allow attackers to cause service failures.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in resource management errors, which allow attackers to cause service failures.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...